Justin: > I have calculated that he is probably too lazy to check his logs. Dangerous! What will happen if they overcome their laziness? If they already created CA cert and even deployed it in some way there is no hope that laziest admin do not just save all the stuff you do (and not MitM-ing TLS). They can and use it against you later. > Even if Meek-Google is broken, I got more information from him that > would indicate that he probably wonât MITM Meek-Amazon or Azure. If > it does become dangerous, I will switch to one of those. Does it matter which TLS to MitM if they have CA in your computer already installed? I recommend to switch now, meek doesn't work in this case as it's supposed to. But it's all about your threat model and up to you. -- Ivan Markin
Attachment:
signature.asc
Description: OpenPGP digital signature
-- tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk